Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa
File:                     3134332e3230382e362e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          Ua5vfOysb11DCWPdbp9QZUYi9ZKaCS8WVpMzGxVKDS4=
Subject key identifier:   55:BE:E7:E1:AE:D5:CD:55:19:D8:6B:B6:3B:D0:B3:A9:CA:CF:1B:D1
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       0AF6F27EA22ED3F7D985E1C6911A09CB1070616B
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa
Signing time:             Fri 25 Apr 2025 14:50:34 +0000
ROA not before:           Fri 25 Apr 2025 14:45:34 +0000
ROA not after:            Fri 24 Apr 2026 14:50:34 +0000
asID:                     264088
IP address blocks:        143.208.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 11:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f6:f2:7e:a2:2e:d3:f7:d9:85:e1:c6:91:1a:09:cb:10:70:61:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:34 2025 GMT
            Not After : Apr 24 14:50:34 2026 GMT
        Subject: CN=55BEE7E1AED5CD5519D86BB63BD0B3A9CACF1BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:d2:c2:42:5a:f6:6e:17:e6:0d:8b:00:04:
                    ba:26:99:08:13:b1:ab:1c:dc:9b:b1:cd:77:ac:06:
                    ad:4a:ac:66:6c:c7:d2:29:bf:5a:7e:67:b5:24:a1:
                    92:92:ae:a2:98:27:e8:12:27:7a:31:ff:a3:d3:94:
                    75:f6:c0:89:c7:2f:0b:db:15:b0:33:80:97:04:a3:
                    68:d6:49:27:34:89:fb:68:f6:22:e1:0f:27:02:2b:
                    8f:3d:ba:3a:ad:86:2f:5a:89:18:a9:34:ab:c3:90:
                    de:1e:83:c3:cc:19:a2:53:24:d6:d1:60:b7:19:3d:
                    f6:7c:dd:46:38:0c:c5:57:0d:46:a9:9a:27:1a:6c:
                    80:f9:d2:88:99:34:81:f5:73:1a:3f:50:bb:b2:62:
                    02:6b:03:0f:ed:b4:92:04:b0:3c:cd:75:a3:d4:7c:
                    88:07:f4:9d:16:0b:ff:9e:ee:29:de:73:16:88:72:
                    df:02:c5:fb:9a:ad:c8:de:7f:be:53:fe:9e:02:9f:
                    dc:ff:d0:c3:1a:48:c5:5b:15:93:e2:33:1f:72:5c:
                    85:92:24:27:e7:4f:c9:a3:ed:80:06:38:f1:10:aa:
                    e7:0e:4f:e0:a7:f6:c0:54:63:54:ab:c3:a4:91:7a:
                    77:0a:48:62:65:27:05:cb:df:35:16:24:ab:23:cf:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:E7:E1:AE:D5:CD:55:19:D8:6B:B6:3B:D0:B3:A9:CA:CF:1B:D1
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:3d:dd:ce:06:d7:e2:19:2b:a9:b9:87:c3:07:d4:63:ff:
         bc:63:0c:39:40:51:83:a1:35:ce:24:7c:1d:29:d4:5a:c3:54:
         13:e0:4e:2c:d6:ee:67:bd:a7:ce:21:d2:d4:13:6d:0a:99:ee:
         fc:51:46:0e:42:e9:8d:f3:25:da:ae:b4:48:55:b9:04:a7:7a:
         41:83:0f:c9:45:ea:c7:ca:00:f6:f5:82:1c:b9:57:ee:54:c7:
         06:dc:a8:74:2f:71:05:ba:e2:74:c3:1e:3d:31:2a:00:96:ca:
         f3:c1:6a:14:84:c9:bb:7b:e7:c5:a1:a3:15:b8:9e:91:32:b0:
         5c:75:3a:b5:a3:cd:3c:82:3e:6f:8a:e3:e8:7d:7f:21:57:e5:
         9e:b9:ac:22:3f:d9:8d:81:f2:ec:fb:4c:2a:c1:c0:ea:d8:d0:
         f6:00:90:1a:1d:c3:b9:18:a9:74:07:9f:77:7e:d7:e4:9c:58:
         19:c1:ec:7e:e1:0b:f2:67:83:fc:31:91:1f:80:04:d2:fb:39:
         62:54:e8:bd:b1:8b:eb:f4:b6:d0:07:0e:ac:17:31:ee:94:7d:
         eb:7b:ec:ec:e3:d5:1f:30:c5:da:d5:0f:4b:a7:af:ad:67:ec:
         a8:ae:9c:c0:6f:a6:89:8c:d8:d7:75:6d:97:9d:ab:90:5c:7c:
         0f:3b:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:49:56 2025 by rpki-client